iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ef473bf1dd7e8dd08bcc04b9e2d1bfed69a0a7ce
linux/net
History
Paolo Abeni ef473bf1dd mptcp: ensure snd_una is properly initialized on connect 
commit 8031b58c3a upstream.

This is strictly related to commit fb7a0d3348 ("mptcp: ensure snd_nxt
is properly initialized on connect"). It turns out that syzkaller can
trigger the retransmit after fallback and before processing any other
incoming packet - so that snd_una is still left uninitialized.

Address the issue explicitly initializing snd_una together with snd_nxt
and write_seq.

Suggested-by: Mat Martineau <martineau@kernel.org>
Fixes: 8fd738049a ("mptcp: fallback in case of simultaneous connect")
Cc: stable@vger.kernel.org
Reported-by: Christoph Paasch <cpaasch@apple.com>
Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/485
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Reviewed-by: Mat Martineau <martineau@kernel.org>
Signed-off-by: Matthieu Baerts (NGI0) <matttbe@kernel.org>
Link: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-1-1ab9ddfa3d00@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-06-21 14:40:29 +02:00
..
6lowpan
net: fill in MODULE_DESCRIPTION()s for 6LoWPAN
2024-02-09 14:12:01 -08:00
9p
net/9p: fix uninit-value in p9_client_rpc()
2024-06-16 13:51:05 +02:00
802
…
8021q
net: gro: fix udp bad offset in socket lookup by adding {inner_}network_offset to napi_gro_cb
2024-05-02 11:02:48 +02:00
appletalk
appletalk: Improve handling of broadcast packets
2024-05-08 12:17:19 +01:00
atm
inet: introduce dst_rtable() helper
2024-06-12 11:39:55 +02:00
ax25
ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
2024-06-21 14:40:03 +02:00
batman-adv
batman-adv: Avoid infinite loop trying to resize local TT
2024-03-29 20:18:43 +01:00
bluetooth
Bluetooth: fix connection setup in l2cap_connect
2024-06-21 14:40:22 +02:00
bpf
bpf: Set run context for rawtp test_run callback
2024-06-21 14:40:05 +02:00
bridge
net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
2024-06-21 14:40:25 +02:00
caif
net: fill in MODULE_DESCRIPTION()s for CAIF
2024-01-05 08:06:35 -08:00
can
Merge tag 'linux-can-next-for-6.9-20240220' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next
2024-02-20 15:32:45 +01:00
ceph
libceph: init the cursor when preparing sparse read in msgr2
2024-03-06 12:43:01 +01:00
core
rtnetlink: make the "split" NLM_DONE handling generic
2024-06-21 14:40:06 +02:00
dcb
…
dccp
Merge tag 'kbuild-v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
2024-03-21 14:41:00 -07:00
devlink
devlink: fix port new reply cmd type
2024-03-19 19:37:57 -07:00
dns_resolver
Merge tag 'net-next-6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2024-01-11 10:07:29 -08:00
dsa
net: dsa: Leverage core stats allocator
2024-03-07 20:37:13 -08:00
ethernet
netkit: Fix pkt_type override upon netkit pass verdict
2024-06-12 11:39:48 +02:00
ethtool
net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
2024-06-21 14:40:10 +02:00
handshake
net/handshake: Fix handshake_req_destroy_test1
2024-02-08 18:32:29 -08:00
hsr
hsr: Simplify code for announcing HSR nodes timer setup
2024-05-08 18:56:30 -07:00
ieee802154
Merge tag 'ieee802154-for-net-next-2024-03-07' of git://git.kernel.org/pub/scm/linux/kernel/git/wpan/wpan-next
2024-03-08 20:35:33 -08:00
ife
net: sched: ife: fix potential use-after-free
2023-12-15 10:50:18 +00:00
ipv4
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
2024-06-21 14:40:23 +02:00
ipv6
net/ipv6: Fix the RT cache flush via sysctl using a previous delay
2024-06-21 14:40:25 +02:00
iucv
Merge tag 's390-6.9-2' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux
2024-03-19 11:38:27 -07:00
kcm
net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
2024-03-11 09:53:22 +00:00
key
net: fill in MODULE_DESCRIPTION()s for af_key
2024-02-09 14:12:01 -08:00
l2tp
inet: introduce dst_rtable() helper
2024-06-12 11:39:55 +02:00
l3mdev
…
lapb
…
llc
llc: call sock_orphan() at release time
2024-01-30 13:49:09 +01:00
mac80211
wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
2024-06-21 14:40:02 +02:00
mac802154
mac802154: fix llsec key resources release in mac802154_llsec_key_del
2024-03-06 21:01:26 +01:00
mctp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-02-29 14:24:56 -08:00
mpls
inet: introduce dst_rtable() helper
2024-06-12 11:39:55 +02:00
mptcp
mptcp: ensure snd_una is properly initialized on connect
2024-06-21 14:40:29 +02:00
ncsi
net/ncsi: Fix the multi thread manner of NCSI driver
2024-06-21 14:40:03 +02:00
netfilter
netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
2024-06-21 14:40:23 +02:00
netlabel
netlabel: remove impossible return value in netlbl_bitmap_walk
2024-02-28 19:37:34 -08:00
netlink
net/netlink: Add getsockopt support for NETLINK_LISTEN_ALL_NSID
2024-03-11 15:48:34 -07:00
netrom
netrom: fix possible dead-lock in nr_rt_ioctl()
2024-05-30 09:45:02 +02:00
nfc
nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
2024-06-12 11:39:43 +02:00
nsh
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
2024-04-26 12:20:01 +02:00
openvswitch
openvswitch: Set the skbuff pkt_type for proper pmtud support.
2024-06-12 11:39:41 +02:00
packet
af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
2024-05-30 09:45:03 +02:00
phonet
phonet: fix rtm_phonet_notify() skb allocation
2024-05-06 18:30:00 -07:00
psample
genetlink: Use internal flags for multicast groups
2023-12-29 08:43:59 +00:00
qrtr
net: qrtr: ns: Fix module refcnt
2024-05-30 09:45:02 +02:00
rds
net/rds: fix possible cp null dereference
2024-03-29 12:04:09 -07:00
rfkill
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-12-21 22:17:23 +01:00
rose
net/rose: fix races in rose_kill_by_device()
2023-12-15 11:59:53 +00:00
rxrpc
rxrpc: Only transmit one ACK per jumbo packet received
2024-05-08 08:05:03 -07:00
sched
net/sched: initialize noop_qdisc owner
2024-06-21 14:40:22 +02:00
sctp
inet: introduce dst_rtable() helper
2024-06-12 11:39:55 +02:00
smc
net/smc: avoid overwriting when adjusting sock bufsizes
2024-06-21 14:40:05 +02:00
strparser
…
sunrpc
SUNRPC: return proper error from gss_wrap_req_priv
2024-06-21 14:40:17 +02:00
switchdev
net: bridge: switchdev: Skip MDB replays of deferred events on offload
2024-02-16 09:36:37 +00:00
tipc
inet: introduce dst_rtable() helper
2024-06-12 11:39:55 +02:00
tls
tls: fix missing memory barrier in tls_init
2024-06-12 11:39:43 +02:00
unix
af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
2024-06-21 14:40:26 +02:00
vmw_vsock
vsock/virtio: fix packet delivery to tap device
2024-04-02 18:00:24 -07:00
wireless
wifi: cfg80211: pmsr: use correct nla_get_uX functions
2024-06-21 14:40:01 +02:00
x25
net/x25: fix incorrect parameter validation in the x25_getsockopt() function
2024-03-11 09:53:22 +00:00
xdp
Revert "xsk: Support redirect to any socket bound to the same umem"
2024-06-16 13:51:10 +02:00
xfrm
net: fix __dst_negative_advice() race
2024-06-12 11:39:55 +02:00
compat.c
file: stop exposing receive_fd_user()
2023-12-12 14:24:14 +01:00
devres.c
…
Kconfig
net: bql: allow the config to be disabled
2024-02-18 10:19:21 +00:00
Kconfig.debug
…
Makefile
af_unix: Remove CONFIG_UNIX_SCM.
2024-01-31 16:41:16 -08:00
socket.c
net: remove {revc,send}msg_copy_msghdr() from exports
2024-03-14 16:48:53 -07:00
sysctl_net.c
…